Cyber & A&A Security Specialist — Hybrid Remote

Attainx Inc.; Silver Spring (MD); Hybrid; USD 98,000 - 110,000; Full time

Benefits offered by this job

Paid vacation

Medical, dental, and vision coverage

Matching 401(k) plan

Long & Short-Term Disability

Job summary

AttainX, Inc. is seeking a Cyber & A&A Security Specialist to join our cyber security program supporting a US federal government client in a hybrid remote role, based near Silver Spring, MD. You will apply RMF, conduct A&A activities, and coordinate with stakeholders.

Required are 5+ years in IT security, experience with NIST RMF, and tools like Tenable Nessus, ArcSight, and IBM BigFix. A bachelor's degree is preferred; professional certs such as CISSP/CISA/GCIH are highly valued.

Qualifications

• 5+ years applying IT security concepts and using standard tools.
• 5+ years with enterprise architecture methodologies, concepts, and tools.
• 5+ years in contingency planning and backup/recovery per NIST guidance.
• 5+ years using technical testing tools such as Tenable Nessus, ArcSight, IBM Big Fix.
• 5+ years performing assessments of Federal Information Systems using RMF.
• Ability to work in a cohesive team environment.
• Hold or obtain within six months one of: CISSP, CISA, GCIH, GSNA, CEH, CGRC, SCNP, SCNA.

Responsibilities

• Conduct full lifecycle Security Control Assessments and A&A for NWS systems per RMF, policy, and directives.
• Validate SSPs, FIPS 200 controls, and NIST SP 800-53 compliance.
• Execute security control tests via documentation review, validation, and stakeholder interviews.
• Collect and document evidentiary artifacts to verify control implementation.
• Utilize CSAM to retrieve POAMs and artifacts for A&A documentation accuracy.
• Analyze vulnerability scans to identify gaps and validate remediation.
• Develop pre-assessment and assessment deliverables (SAPs, SCA workbooks, kickoff decks).
• Document assessment results and risk determinations in SARs, VARs, and ATO briefing decks.

Skills

Cyber Security

Information Security

A&A

Education

Bachelor’s Degree (or higher) in a related field

Tools

Tenable Nessus

ArcSight

IBM BigFix

CSAM

Job description

AttainX, Inc. is seeking a Cyber & A&A Security Specialist to join our cyber security program supporting a US federal government client in a hybrid remote role, based near Silver Spring, MD. You will apply RMF, conduct A&A activities, and coordinate with stakeholders.

Required are 5+ years in IT security, experience with NIST RMF, and tools like Tenable Nessus, ArcSight, and IBM BigFix. A bachelor's degree is preferred; professional certs such as CISSP/CISA/GCIH are highly valued.